Following #19995 and #17409 this PR enables skipping userns re-mapping when creating a container (or when executing a command). Thus, enabling privileged containers running side by side with userns remapped containers. The feature is enabled by specifying ```--userns:host```, which will not remapped the user if userns are applied. If this flag is not specified, the existing behavior (which blocks specific privileged operation) remains. Signed-off-by: Liron Levin <liron@twistlock.com> |
||
|---|---|---|
| .. | ||
| _static | ||
| images | ||
| README.md | ||
| docker-io_api.md | ||
| docker_io_accounts_api.md | ||
| docker_remote_api.md | ||
| docker_remote_api_v1.14.md | ||
| docker_remote_api_v1.15.md | ||
| docker_remote_api_v1.16.md | ||
| docker_remote_api_v1.17.md | ||
| docker_remote_api_v1.18.md | ||
| docker_remote_api_v1.19.md | ||
| docker_remote_api_v1.20.md | ||
| docker_remote_api_v1.21.md | ||
| docker_remote_api_v1.22.md | ||
| docker_remote_api_v1.23.md | ||
| hub_registry_spec.md | ||
| index.md | ||
| remote_api_client_libraries.md | ||
README.md
This directory holds the authoritative specifications of APIs defined and implemented by Docker. Currently this includes:
- The remote API by which a docker node can be queried over HTTP
- The registry API by which a docker node can download and upload images for storage and sharing
- The index search API by which a docker node can search the public index for images to download
- The docker.io OAuth and accounts API which 3rd party services can use to access account information